2026

In the Linux kernel, the following vulnerability has been resolved: ntfs: protect runlist updates with the runlist lock

In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: don't transfer operstate before re

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the stats poll on teard

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: avoid socket lock inversion in l

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_em

In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the overflow validation in iommu

In the Linux kernel, the following vulnerability has been resolved: futex: Also allocate private hash on vfork() As Ja

In the Linux kernel, the following vulnerability has been resolved: net: lock the socket in sock_gettstamp() sk->sk_fl

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix server use-after-free in cifs_chan_skip_o

In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after de_thread()

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a timer which is

In the Linux kernel, the following vulnerability has been resolved: rds: ib: use rds_conn_drop() on protocol version mi

In the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec() race Hyunwoo debugged the f

In the Linux kernel, the following vulnerability has been resolved: swiotlb: use the adjusted address for the highmem p

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copy_to_user

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpm_get_nlmsg_reque

In the Linux kernel, the following vulnerability has been resolved: openvswitch: avoid reallocating confirmed conntrack

In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-fence: fix checking signaling bit for t

In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm: use full sockets in local error paths

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: fix RX checksum use-after-free lan74

In the Linux kernel, the following vulnerability has been resolved: xfrm: use hlist_del_init_rcu for state_cache and st

In the Linux kernel, the following vulnerability has been resolved: xfrm: save input state data before secpath resets

In the Linux kernel, the following vulnerability has been resolved: mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC fro

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIO_CRED credit-return mmap hfi1_

In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on

In the Linux kernel, the following vulnerability has been resolved: drm/msm: RCU-free the scheduler-containing ring and

In the Linux kernel, the following vulnerability has been resolved: smb: client: cancel reconnect work in clean_demulti

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initializat

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of iface in cifs_tr

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix next_buffer UAF and NextCommand bo

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3_enum_sn

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix swapped-out resources never leaving th

Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-ale

Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions.

Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack <= 6.2.13 versions.

Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions.

Unauthenticated Broken Access Control in Sermon'e <= 1.0.2 versions.

Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allow

Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Inc

Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.4.6 versions.

Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions <= 3.0.10 versions.

Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section. <= 2.0.3

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Socialrocket Socia

Subscriber SQL Injection in UDesign Core <= 4.15.0 versions.

Subscriber SQL Injection in ListingPro <= 2.9.12 versions.

Unauthenticated Sensitive Data Exposure in Snapshotify &#8211; All-in-One Backup &amp; Restore &amp; Migrate <= 1.3.2 ve

Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions.

Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions.

Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions.

Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup &amp; Restore <= 2.1.2 versions.